HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Topic Overflow

!/usr/bin/python Exploit title: HP OpenView NNM OvWebHelp.exe CGI Topic overflow Date: 2010.03.30 Software link: hp.com Version: 7.53 Tested on: Windows 2003 SP2 CVE: 2009-4178 Code: Trying 172.16.29.130... Connected to 172.16.29.130. Escape character is '^'. Microsoft Windows Version 5.2.3790 C...

IT-Grundschutz M4.023: Sicherer Aufruf ausführbarer Dateien

IT-Grundschutz M4.023: Sicherer Aufruf ausführbarer Dateien. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94194 Diese Prüfung bezieht sich auf die 11...

CVE-2009-4348

Cross-site scripting XSS vulnerability in index.php in Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector than CVE-2006-2146...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector than CVE-2006-2146...

CVE-2009-4348

The CVE-2009-4348 entry concerns Harold Bakker’s NewsScript (HB-NS) 1.3, where a Cross‑Site Scripting (XSS) flaw exists in index.php. The bug is triggered via the topic parameter in a topic action, enabling remote attackers to inject arbitrary script/HTML. This vulnerability is documented as a se...

Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS)

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service NULL pointer dereference and application crash via a TOPIC message that lacks a topic string...

PT-2009-5921 · Power · Power Bulletin Board

Name of the Vulnerable Software and Affected Versions: Power Bulletin Board versions 2.0.2 and earlier Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in a "new topic" action. This occurs in the forums/index.php file...

PBBoard <=2.0.2 - XSS in Topic

No description provided by source. Sec-Area Advisorypbboard =2.0.2 - XSS in Topic Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...

Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS)

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service NULL pointer dereference and application crash via a TOPIC message that lacks a topic string...

DEBIAN-CVE-2009-2703

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service NULL pointer dereference and application crash via a TOPIC message that lacks a topic string...

CVE-2009-2703

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service NULL pointer dereference and application crash via a TOPIC message that lacks a topic string...

CVE-2009-2703

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service NULL pointer dereference and application crash via a TOPIC message that lacks a topic string...

CVE-2009-2919

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

CVE-2009-2919

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

Forum Script Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Forum script Persistent XSS Vulnerability + Software : Forum script + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz, Sheiry,...

PHP Script Forum Hoster (Topic Delete/XSS) Multiple Vulnerabilities

No description provided by source. \ \ \ / / /\ \ / /| \ / \ | \ \ //\ \ / / / / ruling the web since 9/2008 "Word is born Fight the war fuck the norm!" = "PHP Script Forum Hoster" Multiple vulnerabilities Vendor : http://www.shop-020.de Download :...

PHP Script Forum Hoster (Topic Delete/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== PHP Script Forum Hoster Topic Delete/XSS Multiple Vulnerabilities =================================================================== "Word is born Fight the war fuck the...

PHP Script Forum Hoster - Topic Delete / Cross-Site Scripting

\ \ \ / / /\ \ / /| \ / \ | \ \ //\ \ / / / / ruling the web since 9/2008 "Word is born Fight the war fuck the norm!" = "PHP Script Forum Hoster" Multiple vulnerabilities Vendor : http://www.shop-020.de Download : http://www.shop-020.de/phpscriptat-p12h4s5-PHP-Forum-Hoster-Por.html Author :...

Sql injection

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2008-6867

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...